Privacy Policy

Last updated 27 July 2026

PhotoVault encrypts your photos on your iPhone before they're uploaded. This policy explains what we store and how it's used.

What we collect

Account information. Your email address and a password hash, used only to sign you in.

Your photos. Photos are encrypted on your device before they're uploaded, using a key created on your iPhone and kept in its Keychain. Our servers store the encrypted files rather than viewable images.

Photo details. To show your vault and manage backups we store a filename, file size, dimensions, the date the photo was taken, the date it was backed up, and a fingerprint used to check the backup is intact. Only your account can read these.

Search index. Your iPhone works out what's in each photo so you can search your vault. Those descriptions are encrypted with your key before they're stored.

Access to your photos

We keep a backup copy of your encryption key, so your photos can be recovered if you lose your phone and your recovery key.

This also means we can access your photos. We do so only when we need to — to restore an account, to keep the service safe, or where the law requires it.

What we don't do

• No advertising and no ad identifiers
• No selling or sharing of your personal data
• No tracking of your photo content
• No using your photos to train machine-learning models
• No sharing your photos with anyone else, except as described above

Where your data is stored

Encrypted files and photo details are stored with our infrastructure provider, Supabase, which processes them on our behalf and does not hold our offline key.

Your choices

• Delete a photo. Deleting it in the app removes it from our servers.
• Delete your account. Settings → Delete Account schedules deletion in 2 days; sign in before then to cancel. After that your account, every photo in your vault, and your backup key are erased.
• Get your photos out. Restore any photo to your iPhone at any time; originals come back exactly as they were.

Depending on where you live (for example under GDPR or the CCPA) you may have further rights to access, correct or erase your data. Email us and we'll help.

Children

PhotoVault isn't directed at children under 13 and we don't knowingly collect their data.

Changes

If this policy changes we'll update this page and the date above. We'll announce significant changes in the app.

Contact

Questions or requests: support@photovault.buzz